Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer
File:                     952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer (raw, json)
Hash identifier:          ScbEF+VSQ00UKifr4iIGiTkxR5Atlp3sCzWAw3IX1AM=
Subject key identifier:   95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D3C07AE5E6FCF0988FA3C8452FD452771332E45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 17:37:07 +0000
Certificate not after:    Fri 26 Jul 2024 17:42:07 +0000
Subordinate resources:    AS: 265364
                          IP: 168.205.88.0/22
                          IP: 2804:2ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3c:07:ae:5e:6f:cf:09:88:fa:3c:84:52:fd:45:27:71:33:2e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 17:37:07 2023 GMT
            Not After : Jul 26 17:42:07 2024 GMT
        Subject: CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:3d:c1:27:60:6c:ea:a8:37:99:bb:38:89:
                    9a:a9:e5:dd:2d:a1:51:a0:3e:3b:44:95:26:c9:5e:
                    77:6d:b2:fe:56:a3:31:51:19:a7:37:d5:30:85:60:
                    29:2d:24:47:55:12:4e:05:89:a8:b7:ac:da:ae:35:
                    e5:31:78:1e:d9:f6:c3:f6:37:94:8f:d2:2e:22:90:
                    51:b7:e1:79:a8:71:58:0c:5b:9f:d4:ae:cb:aa:04:
                    d4:60:c3:e2:cd:70:4f:c9:32:81:ec:5c:88:b0:c1:
                    09:9d:15:5c:a5:d7:c6:85:09:a9:ce:c9:5b:1b:fe:
                    b3:9d:a3:cc:77:d7:62:ec:c2:2e:05:db:80:17:97:
                    8c:58:13:f3:2f:45:5e:f4:4f:ac:9c:73:a8:ef:22:
                    d7:da:fd:51:61:58:3c:09:f4:ca:52:0e:bd:83:24:
                    98:20:8d:a8:78:9e:9a:cd:f6:7d:69:0e:4b:c5:51:
                    9c:fb:35:3d:85:82:28:6d:f9:1b:ef:76:70:bb:d5:
                    55:6b:ec:ed:7a:28:d7:ee:87:e5:f5:2d:36:5f:e9:
                    66:75:93:0b:ae:5e:a8:47:5a:91:65:11:cc:5a:28:
                    86:aa:64:fe:2c:b9:dc:ae:9c:33:9e:26:aa:76:ab:
                    6c:b4:ab:23:2e:2a:20:cc:00:39:5e:12:51:e4:4f:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.88.0/22
                IPv6:
                  2804:2ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265364

    Signature Algorithm: sha256WithRSAEncryption
         0d:da:3e:4d:f5:f9:fb:81:16:ba:82:d7:67:04:57:18:d1:eb:
         90:4c:9e:2f:70:0f:99:ba:f3:d5:db:96:cd:74:b9:e5:3a:da:
         e2:4e:1d:03:d8:3f:ec:d2:74:32:5b:01:11:b9:86:4e:84:51:
         bc:6d:89:8d:0d:9a:de:b0:ce:13:80:58:79:b9:1e:fa:89:af:
         3a:90:27:c5:62:12:67:3a:55:68:70:1d:9f:6c:bc:b3:54:6a:
         e9:70:b6:4e:2e:97:3e:ea:4d:5f:4f:eb:ca:8b:96:b1:a5:a3:
         b9:bd:55:08:f3:3e:40:60:22:6e:6e:fd:58:06:b4:ee:4c:8c:
         63:0c:a7:50:23:ef:21:9d:a9:3c:08:80:b0:89:48:78:eb:85:
         5e:cf:ff:b2:63:38:25:cd:4b:3d:91:05:44:4f:12:3b:81:57:
         80:90:41:17:10:25:b1:23:3a:b4:15:4c:bb:e9:a5:ae:ed:8b:
         54:60:63:f1:0e:f7:c8:8e:da:c5:b6:22:e8:1b:f7:7b:5f:4a:
         d7:9a:3f:66:d1:48:9e:3f:a6:5a:38:0b:31:4b:80:24:f4:77:
         cf:54:05:11:6b:96:05:69:a9:cf:26:50:09:73:d6:df:a0:5e:
         28:d3:99:4c:d0:68:0a:c6:0a:bd:41:3a:a7:eb:ae:d7:5e:75:
         91:33:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org